Legit Security is looking for an experienced security leader to build and lead our Security Analyst team — the people who turn the latest threats, frameworks, and data into detections, fixes, content, and insights inside our product and for the industry
About Us
We are a well-funded cybersecurity startup backed by top-tier VCs. Our mission is to solve some of the most challenging problems in software security – how to make organizations build with AI fast, and stay secure, especially against the rising threats from supply chain attacks. Our solution provides full management from AI-generated code to deployment – helping customers analyze their software risk, fix it with agents and secure code during generation.
We are in a fast-growing new space and work hard to become the leader.
What you'll own
- Own the business of security analysis in Legit – owning the quality and content of our risk detection, threat intelligence feed and security-matter-expertise.
- Manage the team — set the bar for the work, coach analysts day-to-day, and own their development and performance.
- Own the team's roadmap together with engineering, product and marketing: prioritize and bring initiatives to promote your business.
- Be the focal point to lead Legit's response to global incidents in supply chain and application security — decide how the team reacts, what ships into the product, and what we publish externally.
- Own the quality and voice of the team's security content — guides, remediation steps, in-product insights, blogs and social publications — and represent Legit as a thought leader in the space.
- Partner with customers and field teams on high-stakes analyses of customer data and environments; present findings to security leaders and use those engagements to sharpen the team's focus.
What you’ll bring
- Has experience leading a security research, detection or analyst team
- Has deep hands-on background in cybersecurity or application security or supply chain security or a closely related domain.
- Has some development experience (can be AI-based), and is comfortable with modern development workflows.
- Knows how to balance speed and rigor — and how to make that trade-off legible to a team under incident pressure.
- Writing and speaking skills in English enough to represent Legit publicly: customer executives, webcasts, blogs and social platforms.
If you think you are "Legit”, let's talk
Skills Required
- Experience leading a security research, detection, or analyst team
- Deep hands-on experience in cybersecurity, application security, supply chain security, or a closely related domain
- Some development experience, including AI-based development
- Ability to balance speed and rigor during incidents
- Strong English writing and speaking skills for customer executives, webcasts, blogs, and social platforms
What We Do
Legit Security is the AppSec platform purpose-built to secure AI-powered development. Legit VibeGuard provides complete visibility and security for AI code and development processes. Legit ASPM extends that protection across your entire SDLC – unifying AppSec testing, secrets prevention, software supply chain security and vulnerability management in a unified control plane.
